CVE-2013-7327: The gdImageCrop function in ext/gd/gd.c in PHP… (CVSS 6.8)

Description

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.

Exploit likelihood

2.68%Up 1.5 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php7` openSUSE:Tumbleweed From an advisory covering 70 CVEs	before 7.0.14-1.4	7.0.14-1.4
`php5` openSUSE:Tumbleweed From an advisory covering 71 CVEs	before 5.6.28-1.1	5.6.28-1.1
`php8` openSUSE:Tumbleweed From an advisory covering 97 CVEs	before 8.0.11-1.1	8.0.11-1.1

What each source reports

NVD Score used6.8

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.

Record: CVE-2013-7327
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE ListNo score

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.

Record: CVE-2013-7327
Updated: 2026-11-02

EUVDEUVD-2013-7102No score

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.

Record: EUVD-2013-7102
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9pmm-3h3g-3r55No score

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values,...

The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via invalid imagecrop arguments that lead to use of a NULL pointer as a return value, a different vulnerability than CVE-2013-7226.

Record: GHSA-9pmm-3h3g-3r55
Weakness: CWE-20
Updated: 2026-11-02

OSVBELL-CVE-2013-73276.8

CVE-2013-7327 does not affect BellSoft software